feat: add publib-github command for creating GitHub releases

[mrgrain]

You can now publish GitHub Releases with publib. The new publib-github command creates a GitHub release for a tag, with release notes from a changelog file. Like all other publishers it is driven by environment variables and supports PUBLIB_DRYRUN:

GITHUB_TOKEN=*** \
GITHUB_RELEASE_TAG_FILE=dist/releasetag.txt \
GITHUB_CHANGELOG_FILE=dist/changelog.md \
npx publib-github

The target repository and commit are inferred from the local git repository (the origin remote and the current HEAD), or can be set explicitly via GITHUB_REPOSITORY and GITHUB_SHA — in GitHub Actions workflows these are already set automatically.

Re-running a release is safe: if a release for the tag already exists, the command succeeds and leaves the existing release untouched. Set GITHUB_PRERELEASE=true to mark the release as a prerelease, and GITHUB_MARK_LATEST=true|false to control whether GitHub labels it as the latest release — useful when publishing patches for older major versions. GitHub Enterprise instances are supported via GITHUB_API_URL.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None